Global IT Solution Architect Director

ZipRecruiter; London; On-site; GBP 75,000 - 110,000; Full time

Job summary

A leading company is seeking a Cloud Security Specialist for their London office. The role involves designing and implementing cloud security solutions, focusing on managing identities across multi-cloud environments. Ideal candidates will have substantial experience in cloud security, secrets management, and strong problem-solving skills. This position offers the chance to shape security practices in a prestigious organization.

Qualifications

• 7+ years' experience with AWS, GCP, Azure, or Alibaba cloud.
• 3+ years' experience in secrets management on a global scale.
• Experience with Cloud Security Posture Management and tier 3 outage support.

Responsibilities

• Implementing cloud security enhancements and managing non-human identities.
• Developing security standards and policies, and mentoring team members.
• Collaborating with stakeholders and influencing engineering decisions.

Skills

Cloud security

Secrets management

Risk-based authentication

API concepts

Terraform

Education

Bachelor's degree or equivalent

Tools

HashiCorp Vault

AWS Secrets Manager

Azure Key Vault

GitHub

Job description

Job Description

Locations: Canary Wharf | Atlanta | Boston

Who We Are

Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation— inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities.

Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures—and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.

What You'll Do

This role focuses on designing, implementing, and tracking cloud security enhancements with a specialization in managing non-human identities across multi-cloud and SaaS environments.

You will influence engineering decisions to drive secure and successful business outcomes while collaborating with internal teams to protect enterprise information. Key responsibilities include defining and implementing access and security requirements; planning, testing, and supporting secure systems; and serving as a Subject Matter Expert on IT projects. Additionally, you will develop and maintain security standards, policies, and procedures, while mentoring team members to foster a strong security culture.

This position requires a strategic and hands-on approach to strengthen BCG’s cloud security posture.

You're Good At

• Interacting with stakeholders and possessing the ability to influence direction, articulate risks, and advocate for solutions and roadmaps.
• Managing backlog and roadmap of secrets management items to be completed.
• Managing end-to-end delivery of projects with hands-on involvement in the development and configuration of products around secrets management and machine authentication.
• Determining requirements by evaluating business strategies and requirements, implementing information security standards, conducting system and vulnerability analyses and risk assessments, recommending secure architecture aligned to business architecture, and identifying/driving remediation of integration issues.
• Providing expert knowledge of solution/application architecture for related capabilities as well as methodologies in the software development life cycle.
• Maintaining security data and principles by ensuring compliance to standards, policies, regulatory requirements, and good industry practices.
• Self-managing progress and status of tasks and deliverables on projects and escalating issues and risks timely.
• Completing market assessments on vendor products, packages, and services; guiding tests and implementation of products solving enterprise information security requirements.
• Suggesting and implementing alternative mitigations/compensating controls to allow for business to continue while protecting BCG's assets.
• Partnering with cross-functional teams to ensure compliance to industry and company standards including ISO 27001, SOC2, NIST, GDPR, and DPO standards.
• Updating job knowledge by tracking and understanding emerging practices and standards; participating in educational opportunities; reading professional publications; maintaining personal networks; participating in professional organizations.
• Vendor escalations and Major Incident Management support for business-critical services.
• Able to provide L3 operational support for Secrets Management tooling and oversight of L1/L2 operations issues.
• Create and track health, security, and adoption metrics.

What You'll Bring

Nice Haves

• Bachelor’s degree (or equivalent related experience)
• 7+ years’ experience working with AWS, GCP, Azure, or Alibaba cloud
• Understanding of API concepts and RESTful services
• Understanding of cloud security, zero trust, risk-based authentication, and MFA solutions
• Hands-on/direct experience integrating web, single-page, applications through API endpoints, API services for machine-to-machine authentication
• Related certifications (e.g., Security Plus, CISSP, CCSP, ITIL Foundations, CE+)
• Experience working in Agile, knowledge of Jira, Jira Align, Miro, and related tools and principles
• Experience as a change management practitioner using industry best practices and ServiceNow tooling and workflows

Must Haves

• Ability to drive adoption of secrets management best practices, primarily using HashiCorp Vault
• 3+ years’ experience of secrets management through large-scale implementations distributed globally
• Experience managing cloud secrets management solutions such as Azure Key Vault, Google Secrets Manager, and AWS Secrets Manager
• Experience with Cloud Security Posture Management (CSPM) across AWS, Azure, and GCP
• Tier 3 support experience for service outages and mission-critical application support
• Experience with app registrations and service principals in Azure AD
• Experience documenting complex architectures
• Experience with GitHub (or similar tools including Chef or Puppet), CI/CD
• Proficient in Terraform for infrastructure as code, including writing, testing, and managing complex modules across cloud environments

Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to sex, gender, protected veteran status, or any other characteristic protected under applicable law.

BCG is an E-Verify Employer. More information on E-Verify.